CVE-2026-70378

The CVE describes imagecli: negative values for carve ratio in Carve::apply() (src/image_ops.rs) are not validated to be positive. With ratio <= 1.0 only asserted, a negative ratio can drive the computed target width to 0 via Rust’s float-to-uint cast, then be passed to imageproc::seam_carving...

CVE-2026-70378 imagecli: Negative carve Ratio Bypasses Bounds Check and Crashes Process via Reachable Panic

imagecli's carve pipeline operation Carve::apply in src/imageops.rs only asserts ratio = 1.0, never validating that the ratio is positive. A negative ratio e.g. -5 causes the computed target width to saturate to 0 via Rust's defined float-to-uint cast, which is then passed to...